Lead Abatement Supervisor

Correct: Surveillance audits are designed to maintain confidence that the certified OHSMS continues to fulfill requirements between recertification audits. According to ISO/IEC 17021-1, surveillance activities must include inquiries on aspects of the OHSMS such as internal audits, management reviews, actions taken on non-conformities, and progress toward achieving objectives. This ensures that changes to the system, like the new disposal process, are integrated and that the system is maturing and improving over time.

Incorrect: The strategy of re-evaluating every single clause of the standard is the purpose of a recertification audit rather than a surveillance audit. Simply conducting a full-scale review would be an inefficient use of resources for a surveillance visit. Focusing only on new systems or high-risk areas neglects the requirement to verify the overall health of the management system. Opting for a scope limited to logo usage and policy statements is insufficient because it fails to assess the operational effectiveness and continuous improvement of the OHSMS.

Takeaway: Surveillance audits focus on system changes, internal audit results, management reviews, and corrective action effectiveness to ensure ongoing OHSMS compliance and maturity.

Correct: Using open-ended questions and active listening is a fundamental auditing skill that encourages the auditee to share more information. This technique helps the auditor identify the underlying processes and potential gaps in the OHSMS by allowing the auditee to explain the ‘how’ and ‘why’ of their operations. It builds trust and ensures that the audit remains an evidence-based process rather than a confrontational interrogation, which is essential for a successful ISO 45001 audit.

Incorrect: The strategy of using rapid-fire closed-ended questions limits the depth of information gathered and may miss critical systemic issues that are not explicitly on a checklist. Opting to provide immediate feedback on the manager’s attitude can be perceived as confrontational and may further shut down communication, damaging the audit relationship. Relying solely on a checklist without probing deeper when faced with guarded responses fails to meet the auditor’s responsibility to seek objective evidence and understand the actual effectiveness of the management system.

Takeaway: Lead auditors must use open-ended questions and active listening to elicit comprehensive evidence and manage auditee defensiveness effectively.

Correct: The principle of independence requires auditors to be free from bias and conflicts of interest. Disclosing the relationship to the certification body and the client allows for a formal risk assessment of the auditor’s impartiality. This transparency is essential for maintaining the integrity of the audit process and ensuring that the certification remains credible under professional standards.

Incorrect: Relying solely on physical evidence does not mitigate the ethical risk of perceived bias or the threat to the audit’s integrity. The strategy of replacing the facility representative during the walkthrough fails to address the underlying conflict of interest regarding the audit’s overall conclusions. Opting to include a disclaimer after the audit is completed is insufficient because the conflict should have been managed before the evidence-gathering process began.

Takeaway: Auditors must proactively disclose potential conflicts of interest to maintain independence and the integrity of the audit process.

Correct: ISO 45001, ISO 9001, and ISO 14001 all follow the High-Level Structure (Annex SL). This framework ensures consistency in terminology and clause structure, making it easier for organizations to integrate multiple management systems by aligning common requirements like context, leadership, and planning.

Incorrect: The strategy of making all objectives identical is incorrect because while objectives should be compatible, each system must address its specific risks and performance metrics. Simply conducting a unified register for SEC and OSHA is misleading as SEC financial reporting is not a requirement of ISO management system standards. Choosing to appoint a single Management Representative is no longer a requirement, as the High-Level Structure removed this specific role to emphasize that leadership and commitment are the responsibility of top management as a whole.

Takeaway: The High-Level Structure (Annex SL) enables seamless integration of ISO 45001 with other management standards through standardized terminology and clause sequences.

Correct: According to ISO 45001 Clause 8.1.2, the hierarchy of controls prioritizes elimination and substitution over engineering, administrative, or PPE controls. By replacing the hazardous substance with a non-toxic alternative, the organization effectively removes the hazard at the source, which is the most reliable method for preventing injury and ill health.

Correct: ISO 45001 Clause 6.1.2.1 requires organizations to establish a proactive hazard identification process that considers routine and non-routine activities, human factors, and the involvement of workers. By integrating worker feedback and analyzing complex operational phases like shutdowns, the organization moves beyond reactive data and addresses the root causes of potential incidents.

Correct: According to ISO 45001 Clause 6.1.2.2, the organization must assess OH&S risks from identified hazards while taking into account the effectiveness of existing controls. A valid prioritization process must look beyond just the hazard itself and evaluate the residual risk remaining after current safeguards are applied, considering both the probability of an event and the potential severity of the resulting harm.

Incorrect: Relying solely on historical OSHA recordable data is a reactive approach that may overlook high-severity risks that have not yet resulted in an incident. The strategy of using financial cost-benefit analysis as the primary prioritization tool fails to meet the standard’s requirement to focus on worker health and safety outcomes. Focusing only on the volume of employees exposed is insufficient because it ignores the severity of the hazard; a fatal risk to a single employee should generally take precedence over a minor irritation affecting many.

Takeaway: Effective risk prioritization must systematically evaluate both severity and likelihood while accounting for the performance of current control measures.

Correct: ISO 45001 Clause 6.1.3 requires the organization to not only have access to legal requirements but also to determine how these requirements apply to its hazards and OHS risks. A tracking log that specifically links OSHA updates to the hazards of the new robotic line demonstrates a proactive process for determining applicability and maintaining up-to-date information as required by the standard.

Incorrect: Relying solely on a digital repository of all regulations fails to demonstrate the active determination of which specific rules apply to the organization’s unique risks. Simply obtaining a legal certification letter is insufficient because it represents a point-in-time conclusion rather than an ongoing management system process for identification and access. Focusing only on manufacturer manuals addresses operational controls and technical specifications but does not fulfill the requirement to identify the broader legal and regulatory framework governing the workplace.

Takeaway: Organizations must establish a systematic process to identify, access, and determine the specific applicability of legal and other OHS requirements.

Correct: ISO 45001 Clause 4.3 requires the organization to consider external and internal issues, requirements of interested parties, and the work-related activities performed. This ensures the OHSMS is comprehensive and addresses all relevant risks within the defined boundaries, including those involving mobile or off-site workers.

Correct: Redesigning the workflow to remove the need for the noisy process is an example of elimination, which is the most effective control because it completely removes the hazard from the workplace.

Incorrect: Replacing equipment with a quieter version represents substitution, which is less effective than elimination because a hazard still exists. Installing soundproof booths is an engineering control that isolates the hazard but does not remove it. Relying on personal protective equipment and shift rotations represents the least effective tier because these methods depend on consistent human compliance and do not address the source of the noise.

Takeaway: The hierarchy of controls prioritizes the complete removal of hazards over methods that rely on isolation or human behavior.

Correct: ISO 45001 Clause 6.1.3 requires organizations to determine and have access to up-to-date legal and other requirements. A failure to capture regulatory changes that occurred over an eighteen-month period indicates that the organization’s process for monitoring and maintaining its legal register is not functioning effectively to ensure the OHSMS remains current with United States federal safety regulations.

Incorrect: Focusing only on the internal audit cycle is incorrect because while internal audits verify compliance, they are not the primary mechanism for the proactive identification of new or changed legal requirements. The strategy of requiring direct communication channels with federal regulators is not a requirement of the standard, as organizations may use various methods such as legal databases or industry associations to stay informed. Opting for a line-by-line review during management meetings is also incorrect, as management reviews are intended to evaluate the overall effectiveness of the OHSMS rather than serving as the primary tool for regulatory tracking.

Takeaway: Organizations must implement a systematic process to monitor and update legal requirements to ensure ongoing compliance and OHSMS integrity.

Correct: ISO 45001 Clause 6.1.3 requires organizations to establish a process to determine and have access to up-to-date legal and other requirements. By implementing a systematic process that includes both mandatory OSHA regulations and voluntary standards, the organization ensures its OHSMS remains compliant and effectively manages risks. This approach ensures that the organization proactively identifies changes in the legal landscape and integrates them into its operational controls.

Correct: ISO 45001 Clause 7.2 requires the organization to determine the necessary competence of workers, ensure they are competent based on education, training, or experience, and retain documented information as evidence. Since the organization’s own internal requirements for biennial training were not met and documentation was outdated, this constitutes a failure to maintain evidence of competence and follow established management system procedures.

Incorrect: Relying solely on the observation of practical skills ignores the mandatory requirement for documented evidence of competence and adherence to internal procedural timelines. Simply suggesting a seminar as an observation fails to address the systematic breakdown in following the established OHSMS training frequency and the lack of objective evidence. The strategy of modifying the manual to match poor performance undermines the integrity of the management system and ignores the necessity of periodic re-evaluation for high-risk tasks. Focusing only on technical proficiency during a walkthrough does not satisfy the standard’s requirement for a structured process to ensure and verify competence over time.

Takeaway: Auditors must verify that competence is supported by documented evidence and aligns with both standard requirements and internal organizational protocols.

Correct: Continuous professional development for ISO 45001 auditors involves a multifaceted approach that includes staying current with both the management system standard and relevant United States legal requirements like OSHA. This ensures the auditor maintains the ability to evaluate compliance and system effectiveness in a changing regulatory environment.

Correct: ISO 45001 Clause 5.1 requires top management to ensure that OHS objectives are established and are compatible with the strategic direction of the organization. When a company shifts its strategy toward automation, the OHS objectives must reflect this change by addressing the specific hazards and risks introduced by the new technology. Failure to update objectives to cover human-machine interface risks demonstrates a disconnect between the business strategy and the safety management system.

Incorrect: Relying on the specific job title of the person who drafted the objectives is incorrect because the standard requires leadership and commitment but does not mandate that the COO personally write the documents. The strategy of matching safety budget increases to capital expenditure is a financial management preference rather than a specific requirement for objective alignment under the standard. Focusing on the aspirational nature of injury targets misinterprets the standard, as zero-harm goals are common and do not inherently prove a lack of strategic alignment.

Takeaway: OHS objectives must be updated to reflect and mitigate risks introduced by changes in the organization’s strategic business direction.

Correct: Clause 7.2 of ISO 45001 requires organizations to determine the necessary competence of workers that affects OHS performance. By correlating specific hazards identified in the risk assessment process and applicable US legal requirements (such as OSHA 29 CFR 1910) with individual roles, the organization ensures that training is targeted, risk-based, and verifiable.

Incorrect: Implementing a universal curriculum often overlooks specific high-risk tasks that require specialized technical competence beyond general industry awareness. The strategy of using voluntary sign-ups lacks the systematic rigor needed to ensure all safety-critical roles meet defined competency standards. Opting for financial benchmarking focuses on resource inputs rather than the actual output of worker competence and hazard control effectiveness.

Takeaway: Effective training needs analysis must link specific workplace hazards and legal obligations to the required competencies for each individual job role.

Correct: According to ISO 45001 Clause 6.1.3, an organization must not only determine its legal and other requirements but also maintain and update this information. In the United States, OSHA regulations and enforcement directives can change frequently, and a static list from eighteen months ago does not reflect the current legal landscape, representing a failure in the process of maintaining up-to-date information.

Incorrect: Relying solely on an initial identification of standards without a mechanism for periodic review ignores the requirement to keep legal information current. Simply documenting a list in a registry is only the first step and does not fulfill the ongoing maintenance obligation. The strategy of waiting for a biennial management review is insufficient for ensuring that day-to-day operations remain compliant with evolving federal safety mandates. Opting for mandatory third-party certification of the legal registry is an incorrect interpretation, as the standard allows the organization to manage its own process for staying current.

Takeaway: ISO 45001 requires organizations to establish a process to maintain and update legal requirements to ensure ongoing compliance and risk management.

Correct: Integrity and independence are fundamental auditing principles under ISO 19011 and ISO 17021. Accepting a fee for consulting while acting as a third-party auditor creates a direct conflict of interest and violates the principle of independence. Disclosing the prior relationship and reporting the finding objectively ensures fair presentation and maintains the credibility of the certification process and the safety of the workers.

Incorrect: The strategy of providing consulting services to an audit client compromises the auditor’s impartiality and violates the strict separation required between auditing and consultancy. Choosing to recuse oneself without documenting a discovered critical safety failure neglects the auditor’s responsibility to provide an evidence-based report and could leave workers at risk. Opting for a delay in reporting to provide informal guidance constitutes a threat to independence and undermines the due professional care expected of a lead auditor.

Takeaway: Auditors must maintain independence by refusing consulting roles with audit clients and disclosing potential conflicts of interest to ensure objective reporting.

Correct: ISO 45001 Clause 6.1.3 specifically mandates that an organization must determine and have access to up-to-date legal requirements. In the United States, this necessitates a clear link between the OHSMS and OSHA standards. The auditor’s role is to ensure the organization has a functioning process to stay compliant with federal law as part of the management system’s integrity.

Incorrect: Accepting the claim that a voluntary international standard replaces federal law ignores the mandatory nature of OSHA regulations. The strategy of prioritizing the standard over legal requirements contradicts the standard’s own requirement to fulfill legal obligations. Opting to replace regulatory terminology with standard-specific language creates unnecessary conflict with federal compliance documentation and does not improve the OHSMS.

Takeaway: ISO 45001 requires organizations to integrate applicable legal requirements, such as OSHA regulations, into their management system processes.